Extracted

• • Target

    220e1c910f9577a81be54290fb4751d009a1946026bd51990160bc506b2b68bd.elf

  • Size

    5.1MB

  • MD5

    a2dc807281d4e53d566e8a27b5caae6a

  • SHA1

    d704c9516c33fde2b362e0584dc6bcdbb0484962

  • SHA256

    220e1c910f9577a81be54290fb4751d009a1946026bd51990160bc506b2b68bd

  • SHA512

    e1dffa9e29bcadd098ba390eda9da813567b7cb30efa6b9eb5879327c948acc4a886a7562240f899a810d112b90eed6aa785cd486cd4659f406bb59418bdf75b

  • SSDEEP

    49152:PJzG9XxZPF773LVPN9GnMbaVZGNJru8cYWPAXq7nLYvVorzmpxUIU1F1:hzG9Xn53LtN9pbu0Jru8cYWPAXqi

  Score

  7^/10

  defense_evasiondiscoverypersistenceprivilege_escalation

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation
  behavioral1